PT-2022-16472
CVE-2022-24111
·
تاريخ النشر
2022-02-10
·
تاريخ التحديث
2022-02-23
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mahara versions 21.04 through 21.04.2
Mahara versions 21.10 through 21.10.0
Description
The issue allows portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels to be viewed without requiring a login if the URL to these portfolios is known.
Recommendations
For Mahara versions 21.04 through 21.04.2, update to version 21.04.3 to resolve the issue.
For Mahara versions 21.10 through 21.10.0, update to version 21.10.1 to resolve the issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾